It's trivial to blackhole a domain if you run your own DNS, without adding any new features to bind. I do it all the time, by becoming authoritative at whatever

It's trivial to blackhole a domain if you run your own DNS, without adding any new features to bind. I do it all the time, by becoming authoritative at whatever level of the domain I need. But it takes special consideration and monitoring to avoid creating new problems. The threat here is that someone will identify a "bad website" and blacklist the domain via some publicly available policy server, which suddenly makes all services, not just HTTP, unavailable. For example, this means you might not be able to notify the admins of a domain via email if they host a blog (possibly yours) that gets exploited. Due to the fundamental nature of the service DNS provides, this could be an easy way to DOS an entire domain and all of its services.